To exploit this vulnerability, an attacker would have to attach a file as a link to an email. The email could then be shared with individuals that should not have access to the files, ignoring the default organizational setting.
The security update addresses the vulnerability by correcting how Outlook handles file attachment links.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft Office 2019 | affected |
|
||||||
| Microsoft | Microsoft 365 Apps for Enterprise | affected |
|
||||||
| Microsoft | Microsoft Outlook 2016 | affected |
|
||||||
| Microsoft | Microsoft Outlook 2013 Service Pack 1 | affected |
|
||||||
| Microsoft | Microsoft Outlook 2010 Service Pack 2 | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 23 Feb 2026 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 23 Feb 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an attacker would have to attach a file as a link to an email. The email could then be shared with individuals that should not have access to the files, ignoring the default organizational setting. The security update addresses the vulnerability by correcting how Outlook handles file attachment links. | An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an attacker would have to attach a file as a link to an email. The email could then be shared with individuals that should not have access to the files, ignoring the default organizational setting. The security update addresses the vulnerability by correcting how Outlook handles file attachment links. |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2024-08-04T06:39:10.465Z
Reserved: 2019-11-04T00:00:00.000Z
Link: CVE-2020-1493
Vulnrichment
Updated: 2024-08-04T06:39:10.465Z
NVD
Status : Modified
Published: 2020-08-17T19:15:16.210
Modified: 2026-02-23T18:25:22.050
Link: CVE-2020-1493
Redhat
No data.
OpenCVE Enrichment
No data.